41 results for “Meta”

Secure Transaction Verification and Authorization (STVA) is a draft Standards Track ERC (created October 2026) by @MATOBOYCRYPTO65. It proposes structured human-readable metadata and semantic intent for transactions and UserOperations, an independent simulation and verification interface, and scoped, revocable capability tokens for privileged operations. It targets blind signing and frontend supply-chain attacks, citing the February 2025 Bybit Safe multisig theft. The page gives only the abstract, motivation and core concepts.

ethresear.chpaperPublished and added 28 Oct 2026🛡️ Security

Metacognitive Decoding is a lightweight plug-in controller for diffusion language model backbones. It learns when to finalize tokens and how far generation should extend, and is trained on agent trajectories to balance correctness against generation cost. Across five benchmarks it cuts inference FLOPs by 20.6% on average versus the most efficient baseline, with competitive task accuracy. The abstract names no specific benchmarks or backbones.

arxiv.orgpaperAdded 28 Oct 2026, published 27 Oct 2026🧠 AI

NEXUS is a hierarchical reinforcement learning framework that pairs neural skills with symbolic meta-policies, so transparent reasoning sits at the level of high-level skills rather than atomic actions. It uses object-centric observations and LLM interaction to design reward functions and meta-policies. Agents learn disentangled skills, align better with goals in the game manual, resist reward hacking more, and cope better with game simplifications than deep RL. The paper also compares neural, symbolic and neuro-symbolic meta-policy architectures.

arxiv.orgpaperAdded 28 Oct 2026, published 27 Oct 2026🧠 AI

Log-To-Leak is a prompt-injection attack on tool-using LLM agents that abuses Model Context Protocol tool metadata to trigger an attacker-controlled logging call after the last legitimate call, leaking the user query, server name, server response and agent response. Evaluated on five MCP servers and four agents, it reaches 62.64-100% attack success with 76.55-95.64% logging accuracy. Three defenses leave over 55% residual ASR on GitHub MCP with GPT-4o.

arxiv.orgpaperAdded 28 Oct 2026, published 26 Oct 2026🛡️ Security

Decode-time provenance binding is a defense for Model Context Protocol agent pipelines against cross-modal trust laundering, where instructions hidden in an email-signature image via LSB, DCT or metadata steganography get decoded by a tool. It combines HMAC-authenticated trust labels, a provenance ledger and context-taint tracking to block critical tool calls. On a real MCP testbed with 24 adaptive payloads, attack success fell from 100% undefended (62.5% for keyword and regex filters) to 0%.

arxiv.orgpaperAdded 26 Oct 2026, published 22 Oct 2026🛡️ Security

The Geometry of Metaphor is an October 2026 arXiv preprint that uses mechanistic interpretability to find causal subspaces for metaphor in LLMs of different architectures and sizes. The authors steer output on classification tasks across parts of speech. They also steer generation tasks, showing the metaphoricity of model output can be controlled. The abstract gives no model names or metrics.

arxiv.orgpaperAdded 24 Oct 2026, published 22 Oct 2026🧠 AI

"How employment is changing at Anthropic" is an October 2026 technical report by Nathan Wilmers, Regina Catipon, Maxim Massenkoff and Peter McCrory. It uses internal employment, agent telemetry, output, survey, calendar and hiring data plus 17 interviews. Junior technical hiring fell from 27% to 9%, agent hours reached six times employee hours by August 2026, and adopters' output rose. Employees increasingly do meta-work managing agents.

anthropic.compaperAdded 19 Oct 2026, published 18 Oct 2026🧠 AI

ToFu is a tool-aware fuzzing framework for LLM tools, including MCP servers. It maps each tool argument, using its metadata, to one of 74 CWE-guided semantics-aware sanitizers (path, URL, SQL and similar). It then generates schema-valid Atheris harnesses and semantic oracles, using runtime tracers for in-process tools and outcome oracles for opaque ones. The LLM (gpt-4.1) only maps sanitizers and writes seeds; it is never the security judge. The paper also shows a "Repeat-After-Me" trick, where an LLM told to repeat attacker-crafted text emits a tool call the orchestrator executes, reproduced on LangGraph, MAF, ADK 2.0, AutoGen, Strands and CrewAI. Across 273 runnable MCP servers (3,405 tools) it reports 253 verified bugs in 343 tools across 118 servers, such as path traversal, log injection and exfiltration. These are failures a crash-based fuzzer would miss. The result matters because it shows LLM-generated tool arguments cannot be treated as trusted.

arxiv.orgpaperAdded 18 Oct 2026🧠 AI

ToFu is a tool-aware fuzzing framework that derives semantic security checks for LLM tools (mainly MCP servers) from their metadata and a corpus of 74 CWE-guided sanitizers. It generates schema-valid Atheris harnesses, uses runtime tracers and outcome oracles to catch bugs that don't crash, and uses an LLM only to map sanitizers and seed inputs, never as the judge. It also describes a "Repeat-After-Me" attack, in which the LLM is told to repeat attacker-written text that the orchestrator then dispatches as a tool call. It was reproduced on LangGraph, MAF, ADK, AutoGen, Strands and CrewAI. On 273 MCP servers it reports 253 verified bugs across 343 tools in 118 repositories, including path traversal, log injection, exfiltration and command bypass.

arxiv.orgpaperAdded 18 Oct 2026🛡️ Security

Introduces Recursive Reward Improvement (RRI) for recursive self-improvement on open-ended expert tasks without answer keys, where a proposer writes both a task and a rubric. Before the solver trains, an adversary writes a rubric-gaming but useless answer, the same model writes an honest answer without seeing the rubric, and up to two repair steps revise the rubric until the honest answer wins. Exploits found also rewrite future task and rubric generation. On HealthBench Professional it beats a Generation Only baseline by 10.9 points at 9B and 12.4 at 27B (10.3 with no external model), and the 27B model transfers to PRBench Hard (+6.6) and ProfBench (+8.0).

arxiv.orgpaperAdded 17 Oct 2026, published 15 Oct 2026🧠 AI

ePrint paper by Andrew Krapivin and Elaine Shi that breaks the long-standing log-squared upper-bound barrier for statistically secure Oblivious RAM and for oblivious search trees in the external-memory model. It gives an optimal O(log_B N) statistically secure ORAM when B ≥ log^{1+ε} N. It also gives an optimal oblivious search tree when B ≥ log^{2+ε} N, which matches non-oblivious search trees ("obliviousness for free"). The block-size assumptions match hardware-enclave deployments that use oblivious algorithms, such as those of Signal and Meta.

eprint.iacr.orgpaperAdded 11 Oct 2026, published 8 Oct 2026🛡️ Security

Proposes "study contracts" that bind an AI-generated study's declared experimental choices, run obligations and claim scope to recorded execution evidence, defining contract-relative verification as distinct from scientific truth. In a diagnostic with eight self-authored clean/mutated pairs, a deterministic fault-specific checker caught all eight mutations, while eighteen LLM judge aliases given metadata-filtered packages flagged 104 of 144 mutated cases (32 abstentions, 8 terminal failures). The authors stress the setting is deliberately information-asymmetric, not a verifier-quality comparison or reward-hacking result, and call for full-information comparisons, legitimate-adaptation controls and closed-loop agent evaluations.

arxiv.orgpaperAdded 9 Oct 2026, published 8 Oct 2026🧠 AI

This paper runs a mechanism-isolating ablation of four document-structure treatments used in retrieval-augmented generation — structure-aligned chunking, LLM-generated chunk contexts, heading-path metadata, and hierarchical two-stage retrieval — under one protocol with matched chunk sizes and a semantically null placebo (shuffled heading paths) to control for the confound that any prepended text perturbs embeddings. Using a coverage-aware nDCG metric and document-clustered bootstrap with Holm correction across 200 Wikipedia Featured Articles (951 queries) and 1,585 QASPER papers (4,303 questions), it finds that structure-aligned chunking with real heading paths beats both contextualized fixed windows and the placebo, naive hierarchical retrieval hurts performance (traced to first-stage section recall failures), and gold structure beats LLM-induced structure on Wikipedia but not QASPER. Effect sizes are small but statistically significant and consistent across corpora, giving RAG practitioners evidence-based guidance on which structure-aware retrieval tricks actually help versus which are placebo effects.

arxiv.orgpaperAdded 8 Oct 2026, published 7 Oct 2026🧠 AI

A preprint hosted in OpenAI's "math" GitHub repository claiming a result on integer multiplication algorithms with complexity below the n log n bound, the long-standing benchmark achieved by the Harvey–van der Hoeven algorithm in 2019. The page itself only exposes citation metadata (author, title, BibTeX entry) with the actual paper linked as a PDF, so the specific proof technique and whether it was AI-assisted cannot be confirmed from the fetched text alone.

github.compaperAdded 7 Oct 2026, published 6 Oct 2026🧠 AI

This arXiv paper studies SKILL.md files — the natural-language metadata describing modular AI Agent Skills — as an attack surface, demonstrating semantic supply-chain attacks against real ClawHub skills. Using text-only manipulations, the authors manipulate embedding-based Discovery retrieval (up to 86% pairwise win rate, 80% Top-10 placement), bias agent Selection toward adversarial variants (77.6% average success), and evade Governance blocking verdicts (36.5%-100% evasion), showing that skill metadata is operational text that shapes agent trust rather than passive documentation.

arxiv.orgpaperAdded 5 Oct 2026🛡️ Security

HeuFouFT is a task-guided framework for selecting which frequency coordinates to train in Fourier fine-tuning (FourierFT), replacing fixed uniform or Gaussian band-pass coordinate selection with a search driven by downstream task performance. It initializes three metaheuristic optimizers (GA-SA, PSO, Cuckoo Search) from a lightweight block-level probe intensity map, using a Random Forest to filter candidate coordinate sets before proxy fine-tuning. On the E2E benchmark with GPT-2-Medium, all three variants beat random-uniform and Gaussian FourierFT and LoRA, with PSO beating the LoCA baseline on four of five metrics while using 37.6% fewer trainable spectral coefficients and only 15-18% of full fine-tuning FLOPs.

arxiv.orgpaperAdded 6 Oct 2026, published 5 Oct 2026🧠 AI

This arXiv paper replays ground-truth tool calls from the AgentDojo and tau-bench agent benchmarks (without an LLM) to generate benign-by-construction tool outputs, then labels injected outputs via differential replay to evaluate fifteen prompt-injection detectors, including Meta's Prompt Guard 2, plus two task-aware LLM judges, also testing them on BIPIA. It finds detection rankings transfer poorly between benchmarks (the best detector on BIPIA catches only 2% of AgentDojo injections at 1% false-positive rate; a detector catching 72% of AgentDojo injections catches only 15% on tau-bench), while false-positive rates do transfer between the two agent benchmarks, and traces this to mismatches between training data format (e.g., training on short prompt strings vs. tool-output-embedded injections) and deployment context.

arxiv.orgpaperAdded 5 Oct 2026, published 2 Oct 2026🛡️ Security

A Proceedings on Privacy Enhancing Technologies paper by IMDEA Networks researchers systematically analyzes the web (via instrumented Chrome/CDP) and Android (via Androguard static analysis plus dynamic instrumentation on a Pixel 3a) clients of nine conversational AI services — ChatGPT, Claude, Grok, DeepSeek, Gemini, Perplexity, Microsoft Copilot, Mistral's Le Chat, and Meta AI. They find every service embeds at least one third-party advertising/tracking service (44 third parties total), that 6/9 web and 3/8 Android clients leak conversation titles, prompts, or screenshots to trackers alongside persistent identifiers, and that several providers expose entire conversations via publicly accessible permalinks lacking access controls. The paper evaluates how consent choices, subscription tiers, and access-control settings shape this exposure and analyzes the practices against GDPR and the ePrivacy Directive, following responsible disclosure to providers and EU DPAs.

jorgegarciaherrero.compaperAdded 2 Oct 2026, published 29 Sep 2026🛡️ Security

Introduces "harness learning," a method that trains a proposer model via reinforcement learning to revise a solver agent's harness (the executable scaffolding coordinating model calls, tool use, and information flow) using execution feedback, treating harness revisions as analogous to weight updates in meta-learning. At test time the proposer refines the harness across successive executions on a new task without any parameter-space update, and experiments on reasoning and multi-hop QA show revision quality improves with training and that test-time adaptation transfers to unseen tasks. The work points toward continually learning agents that convert accumulated experience into generalizable harness improvements rather than model weight changes.

arxiv.orgpaperAdded 29 Sep 2026, published 28 Sep 2026🧠 AI

This paper proposes an architectural mediation approach, implemented as the "Eunomia Agent," that uses the Model Context Protocol to let LLM agents discover and invoke Data Space services as structured, schema-driven tools without modifying existing data space components. A prototype validates end-to-end interaction — catalog discovery, metadata retrieval, and data service invocation — while preserving governance, policy, and access-control constraints native to Data Spaces. It offers practical architectural guidance for organizations wanting to introduce AI-driven automation into governed, sovereign data-sharing ecosystems while maintaining compliance and interoperability.

arxiv.orgpaperAdded 28 Sep 2026🧠 AI

SWE-Bench Pro Verified is a corrected version of the SWE-Bench Pro coding-agent benchmark that closes reward-hacking channels (Git history remnants, hidden test/fixture leakage, metadata leaks, network access to gold patches) and fixes 102 of 731 instances with misleading task descriptions or overly narrow/broad tests. Evaluations show some models that previously scored well (e.g. via hacking) drop substantially on the verified benchmark, while models with little hacking behavior stay roughly the same, suggesting original SWE-Bench Pro scores overestimate real coding capability. Code and dataset are released via AgentCompass and Hugging Face.

arxiv.orgpaperAdded 26 Sep 2026🧠 AI

This paper empirically measures the completeness of AI Bills of Materials (AIBOMs) generated for roughly 97.5K Hugging Face model repositories, examining structural/metadata fields, model identity, license and external-reference data, and model-card documentation such as datasets, limitations, safety-risk and environmental information. It finds that generated AIBOMs satisfy required structural fields but are weak on AI-specific documentation like responsible-use, environmental impact, and meaningful descriptions, and argues for better model-card practices and automated AIBOM validation.

arxiv.orgpaperAdded 26 Sep 2026🧠 AI

This paper proposes no-box vulnerability analysis, a new paradigm for auditing systems using only functionality metadata when neither system access nor runtime interaction is available. The authors build MCPSEC, a prototype that audits Model Context Protocol servers for indirect prompt injection vulnerabilities purely from tool metadata exposed at server registration, evaluating it against 20 widely-deployed MCP servers with 177 tools where human evaluators confirmed 95 vulnerable tools; MCPSEC achieved 98.9% recall versus 84.2% for an LLM baseline, also producing hypothesized exploitation techniques per finding.

arxiv.orgpaperAdded 26 Sep 2026🛡️ Security

This paper identifies lifecycle-hook configuration updates as a trojan vector in AI agent harnesses: hooks bind shell commands to runtime events (session start, tool calls, file edits) and run with host privileges, but harnesses blindly trust plugin-metadata updates that silently rebind these commands to attacker-chosen code. The authors built HookPry, an open-source automated attack framework realizing ten attack objectives, and across 25 harness/backend combinations in 1,000 runs it compromised all seven evaluated harnesses (up to 92.5% per-harness success), while Microsoft Defender caught none of the malicious artifacts and combined static defenses still missed 47.5%.

arxiv.orgpaperAdded 26 Sep 2026🛡️ Security

This paper empirically studies AI Bills of Materials (AIBOMs) generated for ~97.5K public Hugging Face model repositories, measuring how completely they capture provenance, licenses, datasets, model-card details, safety-risk assessments, and environmental information. It finds that generated AIBOMs satisfy required structural/metadata schema fields but are weak or missing on AI-specific documentation such as model cards, responsible-use notes, limitations, and dataset declarations, exposing transparency and governance gaps in the ML model supply chain. The authors argue for better model-card practices, repository-level traceability, and automated AIBOM validation.

arxiv.orgpaperAdded 26 Sep 2026🛡️ Security

FuseChain is a runtime detection framework for software supply-chain attacks that fuses package/runtime traces, process events, network telemetry, DNS/HTTP metadata, and security alerts into a temporal heterogeneous provenance graph on a unified event-time axis. It decouples anomaly detection from attack-stage reconstruction using a frozen anomaly backbone plus a lightweight decoder, improving deployable Stage Recall@500 from 0.369 to 0.881 across seven SSC attack scenarios, with adaptive retrieval further boosting observable-stage recall from 0.524 to 0.655.

arxiv.orgpaperAdded 26 Sep 2026🛡️ Security

MCPTox is a benchmark for evaluating Tool Poisoning Attacks against LLM agents using the Model Context Protocol, where malicious instructions are hidden in a tool's metadata rather than its output. Built on 45 live real-world MCP servers and 353 authentic tools, it generates 1312 malicious test cases across 10 risk categories via three attack templates, and finds widespread vulnerability across 20 LLM agents: o1-mini has a 72.8% attack success rate, more capable models are often more susceptible due to stronger instruction-following, and even the best model (Claude-3.7-Sonnet) refuses less than 3% of attacks.

arxiv.orgpaperAdded 26 Sep 2026🛡️ Security

This paper introduces a self-supervised fine-tuning procedure that trains reasoning models to predict their own confidence at intermediate points in a reasoning trajectory, using only 600 training problems and no explicit length or stopping objective. Despite training only on confidence prediction and using standard generation at inference (no early-stopping or confidence elicitation), the fine-tuned models cut generated tokens by up to 25% at matched accuracy across Gemma, Qwen, Nemotron, and GPT-OSS on math, science, and coding reasoning benchmarks. Analysis shows the models largely retain their base reasoning composition rather than suppressing specific behaviors, suggesting efficient reasoning can emerge as a byproduct of learning metacognitive confidence signals.

arxiv.orgpaperAdded 28 Sep 2026, published 25 Sep 2026🧠 AI

This paper studies Implicit Neural Representations (INRs) as a lightweight alternative to conventional CNN pipelines (e.g. U-Net) for brain MRI semantic segmentation, analyzing their scaling behavior and cross-domain generalization. The authors find INR-based models excel in low-parameter, limited-augmentation regimes but don't scale as well as U-Net with larger capacity, and that segmentation-relevant information is distributed across multiple INR layers. Building on this, they propose HierINRSeg, a hierarchical multi-layer INR architecture that beats the MetaSeg baseline by 5.6 Dice points in-domain and 8.2 points out-of-domain.

arxiv.orgpaperAdded 28 Sep 2026, published 25 Sep 2026🧠 AI

This paper formulates metabolomic feature selection as a Quadratic Unconstrained Binary Optimization (QUBO) problem, balancing feature relevance against redundancy to prepare high-dimensional data for machine learning models like computational biomarkers. The authors test Bias-Field Digitized Counterdiabatic Quantum Optimization (BF-DCQO) and QAOA on gate-based quantum hardware, comparing against classical filter, wrapper, and embedded feature selection methods (including exhaustive search and Iterative Tabu Search) on three Autism Spectrum Disorder metabolomic datasets. Results show reduced runtime versus exhaustive/Tabu search and competitive classifier performance, though the authors explicitly do not claim quantum advantage, framing the work as a NISQ hardware feasibility demonstration.

arxiv.orgpaperAdded 26 Sep 2026, published 24 Sep 2026🧠 AI

A2M (Attraction-to-Manipulation) is a two-stage black-box framework for hijacking agents that use the Model Context Protocol to select tools from third-party MCP servers. The Attraction phase optimizes attacker-controlled tool metadata to raise invocation probability, while the Manipulation phase uses execution traces to craft adversarial tool outputs that steer agent behavior; on LiveMCPBench it achieves a 93.6% malicious tool invocation rate against GLM-4.6, inflates token cost 32.4x under a cognitive denial-of-service variant, and reaches a 74.4% mean attack success rate across information exfiltration, environment integrity compromise, and reasoning derailment, with partial transfer (63.6%/2.7x/24.5%) to four other models without re-optimization. The authors argue this exposes a semantic supply-chain risk in MCP tool ecosystems and call for stronger tool vetting and runtime isolation.

arxiv.orgpaperAdded 2 Oct 2026, published 22 Sep 2026🛡️ Security

ReasAlign is a model-level safety alignment technique that defends LLM agents against indirect prompt injection by adding structured reasoning steps to detect conflicting instructions embedded in external data and preserve the user's original task intent. It also uses a test-time scaling mechanism with a preference-optimized judge model to score and select the best reasoning trajectory. On the CyberSecEval2 benchmark it reports 94.6% utility with only 3.6% attack success rate, substantially outperforming Meta SecAlign, which scores 56.4% utility with a 74.4% attack success rate.

arxiv.orgpaperAdded 22 Sep 2026🛡️ Security

This paper analyzes authentication/authorization gaps in the six official Model Context Protocol SDKs (Python, TypeScript, Go, Rust, C#, Swift), identifying structural shortcomings for enterprise zero-trust deployments: single-header credential binding that breaks dual-persona (human SSO vs. service-account) setups, no pre-authentication tool discovery, and no fine-grained per-tool authorization. The authors propose composable FastMCP extensions — cross-header credential normalization, cached cross-IdP token verification, an unauthenticated metadata/discovery endpoint, and permission-filtered tool visibility enforced consistently at invocation — and test them against four frontier LLMs over 2160 attempts, showing an in-body-check-only server leaks forbidden tools 21.1% of the time versus 0% with permission-aware visibility, while also showing visibility-only filtering is still bypassable by scripted clients and models can infer hidden tool names up to 94% of the time from prompt context.

arxiv.orgpaperAdded 2 Oct 2026, published 18 Sep 2026🛡️ Security

This arXiv paper analyzes six official MCP SDKs (Python, TypeScript, Go, Rust, C#, Swift) and finds structural gaps for enterprise zero-trust use: Authorization headers can't cleanly support both human SSO and service-account callers, there's no pre-authentication tool discovery, and base SDKs lack fine-grained per-tool authorization. The authors build composable FastMCP extensions — cross-header credential normalization, cached token verification across IdPs, an unauthenticated metadata endpoint for registry discovery, and a declarative per-tool permission annotation — and show that visibility-only filtering alone is insufficient (models reference hidden tools by name up to 94% of the time) while combining visibility filtering with invocation-time enforcement drives forbidden tool exposure from 21.1% to 0% across 2160 attempts on four frontier LLMs.

arxiv.orgpaperAdded 2 Oct 2026, published 18 Sep 2026🧠 AI

This paper evaluates cross-sector generalization of a role classifier that structures French occupational accident narratives into four accident-process roles (work situation, unfavourable condition, accident event, consequence). Classifiers trained solely on 42,244 construction-sector factual units are tested without retraining on metallurgy, chemistry-plastics, and an independent company corpus, comparing frozen pretrained representations against task-specific fine-tuning and supervised representation learning. Task-adapted strategies consistently outperformed frozen representations, reaching 85.6-85.8% average balanced accuracy across unseen sectors, supporting transferable assisted-coding systems for occupational risk analysis.

arxiv.orgpaperAdded 22 Sep 2026, published 18 Sep 2026🧠 AI

PISmith trains an attack LLM with GRPO in a black-box setting to generate injected prompts that defeat prompt-injection defenses. It addresses extreme reward sparsity, which causes entropy collapse in standard GRPO, with adaptive entropy regularization and dynamic advantage weighting. Evaluated on 13 benchmarks against 8 defenses and 7 baselines (static, search-based such as TAP and PAIR, and RL-Hammer), it achieves the highest attack success rates and also works on InjecAgent and AgentDojo against GPT-4o-mini and GPT-5-nano. It shows state-of-the-art defenses such as Meta-SecAlign remain vulnerable to adaptive attacks.

arxiv.orgpaperAdded 17 Sep 2026🛡️ Security

This arXiv preprint generalizes the sample-based Krylov quantum diagonalization (SKQD) method from ground-state energy calculations to computing single-particle Green's functions on quantum hardware. By building unitary Krylov subspaces in the N±1 particle sectors and classically evaluating overlaps, the authors reconstruct Green's functions via a Lanczos continued fraction, applying the technique as an impurity solver for dynamical mean-field theory (DMFT) on the single-impurity Anderson model, reproducing spectral features across the metal-insulator transition with shallow, ancilla-free quantum circuits.

arxiv.orgpaperAdded 22 Sep 2026, published 8 Sep 2026🧠 AI

Diffusion TV is an interactive AI art installation built from a modified CRT TV that lets audiences control the clarity of AI-generated images and sounds by physically manipulating the antenna, metaphorically enacting the denoising process of diffusion models. A tuning knob switches between three channels of AI-generated animals (extinct, endangered, speculative), embedding the interaction in a temporal and ecological narrative. The work argues for embodied, tangible interaction as an alternative mode of explainable AI that foregrounds the generative process itself rather than final outputs.

arxiv.orgpaperAdded 22 Sep 2026, published 4 Sep 2026🧠 AI

RegionFed is a federated learning framework for personalized retail search query understanding that operates at the gradient level rather than parameter level, using the ℓ2 conflict between regional and global gradients to diagnose heterogeneity and route regions to personalization strategies. Unlike existing parameter-level personalized FL methods that collapse below 10% accuracy on transformers like T5, RegionFed deploys unchanged across T5-Small, T5-3B, RoBERTa, and CNN architectures. Evaluated on Amazon ESCI, Amazon Reviews, and LEAF-FEMNIST, RegionFed-Meta reaches 92.27% accuracy, closing to within 0.23pp of a privacy-violating centralized upper bound while providing (ε≈0.60)-differential privacy.

arxiv.orgpaperAdded 22 Sep 2026, published 4 Sep 2026🧠 AI

SolarWM is an open foundation for building interactive video world models, providing a reconfigurable multi-source data engine that unifies 1.43 million video clips from 10 datasets into a frame-aligned contract (visual observations, camera geometry, captions, quality metadata, provenance). Using shared camera-conditioning and training interfaces, the authors train four 5B-33B causal models built on Wan2.2, LTX-2.5, and MiniMax-H3 backbones via a three-stage recipe (bidirectional adaptation, teacher-forced autoregressive initialization, distribution matching distillation), enabling real-time interactive rollouts spanning minutes to hours despite training only on 5-second sequences. The project releases data, pipeline, training recipes, weights, and framework code for reproducible world-model research.

arxiv.orgpaperAdded 22 Sep 2026, published 2 Sep 2026🧠 AI

This paper addresses a failure mode in semilocal PBE DFT calculations that mislabels narrow-gap 2D semiconductors as metals, causing viable photocatalysts to be excluded from screening in the Computational 2D Materials Database (C2DB). The authors build a two-stage ML pipeline: a classifier to repair PBE-spurious metallicity using structural/chemical/magnetic descriptors, and a curated XGBoost regressor for HSE06-PBE delta-learning that reconstructs HSE06 band gaps with MAE of 0.108 eV (R-squared=0.989) versus 1.036 eV for raw PBE, validated against targeted VASP HSE06 calculations. The corrected screen yields 28 retained relaxed candidate green-hydrogen photocatalysts, several of which would have been wrongly excluded at the PBE level.

arxiv.orgpaperAdded 22 Sep 2026, published 2 Sep 2026🧠 AI